EUVD-2022-3172

Malicious code in bioql PyPI...

EUVD-2022-1967

Malicious code in bioql PyPI...

EUVD-2025-11206

Malicious code in bioql PyPI...

EUVD-2022-55179

Malicious code in bioql PyPI...

EUVD-2023-1761

Malicious code in bioql PyPI...

EUVD-2025-30391

Malicious code in bioql PyPI...

EUVD-2024-53001

Malicious code in bioql PyPI...

EUVD-2021-9997

Malicious code in bioql PyPI...

EUVD-2025-21938

Malicious code in bioql PyPI...

EUVD-2025-29761

Malicious code in bioql PyPI...

EUVD-2025-29749

Malicious code in bioql PyPI...

EUVD-2022-55269

Malicious code in bioql PyPI...

EUVD-2023-33706

Malicious code in bioql PyPI...

American Fuzzy Lop plus plus 4.34c

Google's American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple but rock-solid instrumentation-guided genetic algorithm. afl++ is a superior fork to Google's afl. It has more speed, more and better mutations, more and better instrumentation, custom module support, etc...

PT-2025-42266

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to memory management and swap operations. Specifically, a race condition between fork and swapoff can lead to a kernel NULL pointer dereference...

CVE-2025-10777

CVE-2025-10777 affects the JSC R7 R7-Office Document Server (versions up to 20250820). A flaw in an unknown function of the file /downloadas/ allows remote exploitation by manipulating the cmd argument to trigger a path traversal. The vendor confirms this vulnerability and specifies a fix in rele...

CVE-2025-58432

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and all prior versions, the /v21/files/file/uploadV2 endpoint allows file upload from ANY USER who has access to localhost. File uploads are performed AS ROOT...

CVE-2025-58431

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and earlier, the /v21/files/file/download endpoint allows file read from ANY USER who has access to localhost. File reads are performed AS ROOT...

Prototype Pollution

Overview expr-eval-fork is a Mathematical expression evaluator fork with prototype pollution fix Affected versions of this package are vulnerable to Prototype Pollution via the evaluation process, which accesses global values by searching for item.value in expr.functions. An attacker can access...

CVE-2025-59416

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2...